Eric Brown Email & Phone Number

California, United States

* Pioneered Precaution, a cutting-edge static analysis security tool for software vulnerability identification and remediation, fully integrated with GitHub for streamlined CI/CD processes.* Led the development of both the Python-based backend on Heroku and the React/Docusaurus frontend, emphasizing user-friendly documentation.* Open-sourced a CLI version, precli, enhancing accessibility for developers through standard library-based rules.

* Spearheaded the development and maintenance of Bandit, a widely recognized open-source project, enhancing code security across multiple applications since 2015.* Fostered a vibrant and collaborative community environment, leading to significant contributions that improved Bandit's functionality, user experience, and documentation.* Elevated Bandit's visibility and utility within the developer community, achieving over 6.1k+ stars, 5+ million monthly downloads, and integration into over 48k+ repositories on GitHub, reflecting widespread adoption and reliance.* Successfully navigated the project through the rigorous acceptance process for fiscal sponsorship under the Python Software Foundation, securing financial support and institutional backing.

Palo Alto, Ca, Us

* Manager of an 10 person team in the Open Source Technology Center (part of the Open Source Program Office), contributing to a diverse set of open source projects such as Ansible, EdgeX, Envoy, Istio, Kubernetes, KubeFlow, Linux, ONNX, and Tern.* On a daily basis, assist our compliance team on issues regarding open source licensing and usage.* Designed and developed a travel approval application using React-admin and json-server to help our management team migrate conference planning from spreadsheets and emails to a properly backed tool.* Led a team to publish a detailed set of open source best practices guidelines to aid internal teams on use of open source within products and how to be most effective contributing upstream.

Palo Alto, Ca, Us

* Led a dedicated Security Team, contributing to essential tooling projects and cryptographic libraries, enhancing security protocols within the Open Source Technology Center.* Creator of GitHub App named Precaution used to scan pull requests for security vulnerabilities.* Speaker: "Bandit and Gosec - Security Linters" at All Things Open 2018

Palo Alto, Ca, Us

* Created open source project named Column, a free-to-use API to run Ansible 2.x playbooks.* Integrated support of VMware Identity Manager with VMware Integrated OpenStack in order to provide a single-sign authentication workflow. * Created a linter plugin for the popular Sublime Text IDE, that scans code in real time to find static security issues.* Extended the OpenStack Nova driver with VMware's guest customization of Windows based images.* Participated in an interview panel on Podcast.__init__ to talk about the security linter Bandit.

Palo Alto, Ca, Us

* Co-speaker: "SFBay OpenStack Advanced Track #OSSFO Topic: OpenStack Security" January 2016* Speaker: “Using Bandit to find Python security issues” for VMware's Internal Security Conference, MooseCon 2015* Founding member of the development of VMware Integrated OpenStack, an OpenStack distribution based on VMware technologies. Main focus of work was on the security of the product.* Devised and implemented a method of encrypting OpenStack's plain-text passwords found in its configuration files.* Contributor to the OpenStack open source community project (mainly Nova, Keystone, and others)* Core contributor of the OpenStack Security Group's Bandit (security linter) project* Core contributor of the OpenStack oslo.vmware project* Contributor of other open source projects such as Ansible, openstack-ansible-modules, python cryptography, etc.

Armonk, New York, Ny, Us

* Security Team Lead for PowerVC, virtualization software based on OpenStack, designed to manage IBM PowerVM systems. * Designed and developed a hybrid OpenStack Keystone identity driver that uses the local operating system and SQL as backing data stores.* Designed and developed a hybrid OpenStack Keystone identity driver that uses LDAP and SQL as backing data stores.* Helped drive a design to bring FIPS 140-2 and NIST SP 800-131A compliance to IBM Systems Director.

Armonk, New York, Ny, Us

* Designed the addition of a SNMPv3 trap notification listener.* Release Technical Lead for IBM Systems Director 6.2.1, 6.2.1.1, and 6.2.1.2* Security Team Lead - 2006 to 2010* Remote Access Team Lead* Designed and developed the back-end services for a AJAX based Remote Command Line application that communicates using SSH, Telnet, and a native interface to the Windows command prompt.* Designed and developed both front-end and back-end services to a web based SNMP Browser and MIB Compiler.* Designed and developed an implementation of JSR 203 (java.nio.file) in the File Management component that supports SFTP, SMB/CIFS, and FTP.* Designed and implemented a VMware Remote Console and Microsoft Hyper-V Virtual Connect launch-from-the-web application.

Armonk, New York, Ny, Us

* Led the development of security functionality such as role-based access control, authentication, authorization, and credential storage for Systems Director 6.x.* Developed a Secure Shell (SSH) client in Java utilizing java.nio.channels and JCE that is used in products throughout IBM.* Designed and implemented a three tiered level of remote system management; agent-less, lite, and rich agents.* Enhanced the base SNMP stack with many features including v2c/v3 support, AES encryption, switch and printer management, and v2c trap listener.* Rewrote the Remote Control keyboard and mouse device drivers into native Windows hooking DLLs.

Armonk, New York, Ny, Us

* As functional owner, developed a recording and playback feature as part of the Remote Control application of IT Director.* Helped port the IT Director Remote Session code from C/C++ to Java/Swing.

West Lafayette, In, Us

* Answered questions concerning UNIX and PC applications and workstations.

Ann Arbor, Michigan, Us

* Responsible for resolving all hardware and software problems. * Wrote programs to automate repetitive tasks using Excel and other macroing languages.

* Responsible for debugging problems with hardware and software of computer systems.

* Contracted to provide onsite computer technician support for University Microfilms International * Installed a standard configuration on a number of PC-based machines.* General troubleshooting of hardware and software problems.